## The problem
Issue flipt-io/flipt#2292 (closed, 7 comments): ### Bug Description I've setup two authentication methods, an OIDC configuration via Azure AD and a GitHub Oauth... When I try to auth via either method, it's clear that the auth works, however I always get the response in the callback of... ``` {"code":16,"message":"handling OIDC callback: unexpected state parameter","details":[]} ``` ... Interestingly for both My configuration is *almost* this (for obvious reasons I've changed the URL and creds): ```yaml log: level: debug encoding: console authentication: required: true session: domain: [redirect_host] secure: false methods: github: enabled:
## What fixed it
If Azure AD OIDC or GitHub auth in Flipt returns the same response no matter what you send, check your load balancer or CDN caching: add a cache whitelist or bypass for `flipt_*` cookies. Cached auth responses cause the mismatch, and whitelisting those cookies fixes login.